Analysis
-
max time kernel
122s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
09/05/2024, 23:16
General
-
Target
1c06a06c43b2390c71b7f4e72c537010_NeikiAnalytics.exe
-
Size
384KB
-
MD5
1c06a06c43b2390c71b7f4e72c537010
-
SHA1
24c87a03ab7f6ba51bc6e5004516141acf030e68
-
SHA256
6f873d825af7f6be3dbfd81359278258abb88cff3ee41215a182958fc7fa355d
-
SHA512
48f0125d07383463132b4e0717c9df1100731e2fa6c9d0417282329d690498f25155ac88f7520b15eb18309a8a0a2655bd9ebddf1f485353fac5f40ecec77994
-
SSDEEP
6144:buk7j1PfhEXU67bMiCoNAybEK12LmlqvZ7uJ6V40saiigCD4H2hz8QZA:buk7jxfhEk67giTAy4lBE6VQ5zCD4V3
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\1c06a06c43b2390c71b7f4e72c537010_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c06a06c43b2390c71b7f4e72c537010_NeikiAnalytics.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\1c06a06c43b2390c71b7f4e72c537010_NeikiAnalytics.exeC:\Users\Admin\AppData\Local\Temp\1c06a06c43b2390c71b7f4e72c537010_NeikiAnalytics.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
384KB
MD5d4011c9b806ccbe80cabfef2d7eff384
SHA1e65982e1e93d3a5c4631d21bc7b2cf55d0b98017
SHA256cb2ae77d66bbb197a14da43f246173f30313a4483ca8ff6ded3c09acc5de00ee
SHA51253f48b9e8e7955d5761ba49aba6aaf5c863289ae0cc96964201b600cd9475f62a5d319f12fca338a00300a57e1af3565470b802e90903c904a06888cb79a8883
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
104KB
-
Filesize
260KB